Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json)
Hash identifier: 8FYehX0TGFHXBTKRWjwbGf3NQuQc5A0ThpkWCyIE1c8=
Subject key identifier: 4F:03:6F:EF:07:1C:BD:FA:29:7B:97:27:4F:1A:D1:A6:17:A3:9F:21
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial: 019E90CAA2A9E5BD5E45B32F1629638E70A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
Manifest number: 0C51
Signing time: Thu 04 Jun 2026 04:00:59 +0000
Manifest this update: Thu 04 Jun 2026 04:00:59 +0000
Manifest next update: Fri 05 Jun 2026 04:00:59 +0000
Files and hashes: 1: 4C1BpphaktIg8MA2zeClb4YsyU4.roa (hash: imbIDYBoq85nxOoVD1lZJskVrwlvW9PzNxybvG5zr1Y=)
2: VTOF1mAuOAY_-tLdNMoe_pcrjMQ.roa (hash: jtjYRNSSBZQBAMWJxgI/LVkURXr1s2BmDS5NjL+Hzks=)
3: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: TZWaEpAJGaaE2QJLJKrq7dPA9qCEJJmKSAfgu4dFR/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:ca:a2:a9:e5:bd:5e:45:b3:2f:16:29:63:8e:70:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Validity
Not Before: Jun 4 04:00:59 2026 GMT
Not After : Jun 5 04:00:59 2026 GMT
Subject: CN=4f036fef071cbdfa297b97274f1ad1a617a39f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ff:7f:f8:ed:2b:43:d7:fa:25:0c:68:38:4b:
a8:e8:ec:44:b6:e8:19:96:a8:70:a9:db:3d:6e:bc:
98:21:87:b4:f8:02:7b:f5:11:33:f4:30:37:18:ae:
8c:4c:b3:dc:fd:a0:db:df:9f:9d:94:77:20:01:c9:
5f:31:12:25:65:b1:cb:8b:99:95:7d:cb:94:ea:6d:
bb:bf:49:ad:e3:9e:19:ef:3e:28:90:75:6a:c4:90:
83:4e:71:de:a8:41:1c:7e:ec:0b:80:0c:32:cb:a1:
de:55:25:5b:49:1e:89:51:e9:9d:7d:cf:f8:ff:35:
4b:07:e3:e2:3f:ce:04:d2:ed:b2:b6:2e:20:9c:39:
21:b8:84:f0:7b:d1:da:1c:d3:1d:c5:ae:e9:65:4e:
3c:9a:c5:15:b1:bd:99:1b:c7:07:f6:28:9b:8f:47:
7a:30:b0:54:da:3f:29:3c:30:e2:95:b6:90:27:ae:
4c:6c:b7:68:93:60:78:11:53:cb:c2:2a:7c:60:7f:
fb:04:04:a8:c3:40:81:d9:2d:72:c5:5c:04:91:f4:
34:b8:9e:0d:d4:41:46:1c:88:3a:0f:ae:48:52:97:
2c:8a:ab:5d:39:aa:e2:74:3d:02:f7:fd:a7:fd:11:
a2:ae:88:b3:fc:61:2c:3e:b8:33:63:26:9e:33:d3:
d9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:03:6F:EF:07:1C:BD:FA:29:7B:97:27:4F:1A:D1:A6:17:A3:9F:21
X509v3 Authority Key Identifier:
keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b9:b5:fd:8c:fa:3d:75:a2:fc:58:88:94:ce:79:2f:c3:9b:
71:b5:3d:b6:c6:c3:1d:bb:e5:30:89:d5:e2:ba:dc:4f:cd:72:
09:77:84:ef:66:28:83:8c:a0:90:d4:8e:23:f9:3d:62:46:16:
6c:2b:12:16:dc:c3:f1:23:4f:c1:72:a6:cb:7c:76:85:ed:d8:
1a:6d:0d:a9:31:06:da:2b:42:39:0c:38:fb:78:36:2b:82:8b:
0c:6a:3b:c9:3d:61:77:5b:bc:98:0b:ab:3f:bf:95:46:96:02:
a4:b5:70:3e:eb:0d:00:38:21:3d:83:45:a3:9a:b1:36:67:c4:
16:18:eb:73:a1:3a:d8:fa:ee:b2:7b:f5:b1:ce:42:33:fe:f9:
78:af:7b:8a:e1:5a:9d:75:e3:52:b0:bb:bf:78:c6:11:92:7c:
03:e3:77:8a:6c:a0:8c:df:62:66:58:ec:5d:d2:5c:a3:f5:7f:
b6:4e:4b:0f:1a:79:4e:6a:c4:1f:8b:9a:03:b7:53:ff:c8:94:
00:c9:b1:40:7c:86:99:80:6a:e9:eb:90:b2:8a:75:5b:c3:54:
bd:02:21:dd:17:56:41:6b:11:a8:f0:c2:54:cf:34:8c:bb:97:
89:d7:be:8e:62:a4:f0:66:27:0b:c5:42:33:32:a6:f1:b1:2b:
4a:f4:8f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:20:48 2026 by rpki-client